v1.10.66

PermissionGateFsm refactor - fix Bypass mode still asking permission for PowerShell. Collapse scattered security if-chain into single priority-ordered FSM. Bypass short-circuits before Ask layers; PrivateRoot + ReadOnly floors preserved.